Docs menu

Diagnose crashes, updates and activation

Use guided checks, the crash timeline, Event Logs, Windows Update, activation, battery and startup checks and dump analysis in Hanki Diagnose.

Diagnose brings evidence that is spread across Windows into one place. Everything here is read-only.

What's in Diagnose

TabUse it to
Guided checksStart from a symptom, such as "My PC is slow", and follow steps that open the right tool.
Crash timelineFollow crashes and unexpected restarts in time order.
Recent Event LogsRead recent Windows event logs around the time of a problem.
Windows ActivationCheck activation status and what Windows reports about it.
Windows UpdateSee when updates last installed, what failed and why, in plain language.
Battery & startupRead battery wear, restart and startup records.
Dump analysisInspect a crash dump with a Microsoft debugger you select.
Guided checks for My PC is slow: check memory, measure the processor, trim startup apps and free up disk space
Guided checks (preview 0.19.0-rc.3).

Crashes and restarts

Note when the problem happened and what you were doing, then compare that time with the crash timeline and event logs. A Kernel-Power 41 event confirms Windows noticed an unexpected shutdown; it does not identify the cause. Treat a crash marker or a debugger's suspected driver as a lead to verify, not a root cause.

Dump analysis

  1. Choose Select Microsoft debugger… and point Hanki at a Microsoft debugger installed on your PC.
  2. Choose Choose / inspect dump… and pick a dump file, for example from C:\Windows\Minidump.
  3. Choose Analyze dump. Tick Allow Microsoft symbol downloads only if you want better results: module and symbol identifiers are then sent to Microsoft's symbol service. The dump itself is never uploaded.

Windows Update

The check reads Windows' own update history. Defender's daily definition updates can't hide a broken Windows Update: the check looks at Windows updates separately. It does not contact the network.

Windows Update check: Windows Update is working, the last update installed two days ago, no updates failed
Windows Update check (preview 0.19.0-rc.3).

Windows activation

The activation check reads Windows' licensing status, the reason codes Windows reports and whether the licensing service is available. It never reads or shows a full product key and never changes your key, edition or activation. On PCs activated through an organization's KMS server, an optional reachability check asks for your approval first and uses only the host Windows is configured with. If Hanki can't find one, ask your organization's administrator.

Battery and startup

On laptops, Windows writes a battery report to a temporary file; Hanki reads it and deletes it straight away. Restart and startup events come from Windows' local records.

Updated · Found something out of date? Report it on GitHub.